Android Framework Session.java Privilege Escalation Vulnerability

A logic error in the Android Framework's Session.java file allows for unauthorized access to another user's images on the device. This vulnerability could lead to local privilege escalation, requiring no additional execution rights or user interaction to exploit.

Impact

Exploitation of this vulnerability could result in unauthorized access to another user's images, potentially leading to further privilege escalation on the device.

Remediation

Users can update their devices to the December 2025 security patch level to address this vulnerability.